On 5/23/22 4:41 AM, Dave Chinner wrote: >> From my experience trying to reproduce it yesterday, my test distros >> don't even enable it and you have to both fiddle the config and add a >> boot parameter to even turn it on. And then it still didn't trigger for >> me. > > I have machines with audit enabled as it seems to be the debian > default these days. I haven't explicitly turned it on - it's just > there. I guess it came along with selinux being enabled on these > test VMs - I have "selinux=1 security=selinux" on the kernel CLI for > these VMs. Hmm, I am running debian on these. Anyway, I'll get one configured so that it triggers this issue, and use that going forward. Maybe I need selinux too, not just audit, and explicitly enable it with the boot parameters. -- Jens Axboe